For IT: what you can check before you say yes

Six questions IT asks, answered only with what the product does today. Whatever is not here, we do not claim.

1. 01

   Who sees what?

   Access is tenant-scoped and role-based, and the server decides what each role sees. You choose which role sees which figures.

   Security and trust →
2. 02

   What can the AI do on its own?

   A payment, a goods receipt or a shipment never goes through without a person. For each scenario you choose the mode: acts on its own, waits for confirmation, drafts, or is paused.

   How it differs from an assistant →
3. 03

   What is recorded?

   For each action you see what was proposed, on what basis and how it ended. Security-relevant events are logged; exact coverage and retention depend on the contract.

   Auditability →
4. 04

   How does it connect to what we already have?

   Bank statements import from MT940, CAMT.053, CSV and Excel files. EU banks can be connected read-only through GoCardless where the keys are configured. Data comes in from Excel.

   Modules →
5. 05

   Where is the data and who processes it?

   The Privacy Notice and the DPA name the roles, subprocessors, transfers and deletion. Region, retention and recovery targets are stated in the signed documents.

   Data processing agreement →
6. 06

   What certifications do you hold?

   Binta does not claim SOC 2 or ISO 27001 on its public pages. A report, target or response time applies only with current evidence or a signed agreement. Ask for the security schedule.

   Evidence, not badges →

Need something that is not here? Ask for the security schedule before the pilot, not after.